Tuesday, 2026-10-20

*** benj_88 is now known as benj_800:39
notqcardoe - thank you https://bugs.launchpad.net/keystone/+bug/217145603:02
opendevreviewOpenStack Proposal Bot proposed openstack/keystonemiddleware master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/keystonemiddleware/+/100736203:57
opendevreviewStephen Finucane proposed openstack/keystonemiddleware master: Adopt pre-commit (redux)  https://review.opendev.org/c/openstack/keystonemiddleware/+/100630813:59
opendevreviewStephen Finucane proposed openstack/keystonemiddleware master: Set id for services in catalog  https://review.opendev.org/c/openstack/keystonemiddleware/+/87950313:59
opendevreviewStephen Finucane proposed openstack/keystonemiddleware master: Enable ignored ruff rules  https://review.opendev.org/c/openstack/keystonemiddleware/+/100649713:59
opendevreviewStephen Finucane proposed openstack/keystonemiddleware master: Add hacking to pre-commit rules  https://review.opendev.org/c/openstack/keystonemiddleware/+/100649813:59
opendevreviewStephen Finucane proposed openstack/keystonemiddleware master: Enable ruff G, LOG, UP rules  https://review.opendev.org/c/openstack/keystonemiddleware/+/100649913:59
opendevreviewStephen Finucane proposed openstack/keystonemiddleware master: Enable ignored ruff rules  https://review.opendev.org/c/openstack/keystonemiddleware/+/100650013:59
opendevreviewStephen Finucane proposed openstack/keystonemiddleware master: Enable ignored ruff rules  https://review.opendev.org/c/openstack/keystonemiddleware/+/100650014:04
opendevreviewGrzegorz Grasza proposed openstack/keystone stable/2026.1: credentials: reject delegated tokens, restrict PATCH to blob only  https://review.opendev.org/c/openstack/keystone/+/100233315:12
opendevreviewMerged openstack/keystone master: ec2: enforce timestamp presence in _check_timestamp  https://review.opendev.org/c/openstack/keystone/+/99390716:56
opendevreviewTakashi Kajinami proposed openstack/keystonemiddleware master: Generalize cache factory  https://review.opendev.org/c/openstack/keystonemiddleware/+/100857617:03
opendevreviewTakashi Kajinami proposed openstack/keystonemiddleware master: Deprecate built-in caching  https://review.opendev.org/c/openstack/keystonemiddleware/+/101152117:03
opendevreviewMerged openstack/keystonemiddleware master: Adopt pre-commit (redux)  https://review.opendev.org/c/openstack/keystonemiddleware/+/100630817:21
opendevreviewMerged openstack/keystonemiddleware master: Enable ignored ruff rules  https://review.opendev.org/c/openstack/keystonemiddleware/+/100649717:21
opendevreviewMerged openstack/keystonemiddleware master: Add hacking to pre-commit rules  https://review.opendev.org/c/openstack/keystonemiddleware/+/100649817:21
opendevreviewMerged openstack/keystonemiddleware master: Enable ruff G, LOG, UP rules  https://review.opendev.org/c/openstack/keystonemiddleware/+/100649917:21
opendevreviewTakashi Kajinami proposed openstack/keystonemiddleware master: Generalize cache factory  https://review.opendev.org/c/openstack/keystonemiddleware/+/100857617:39
opendevreviewTakashi Kajinami proposed openstack/keystonemiddleware master: Deprecate built-in caching  https://review.opendev.org/c/openstack/keystonemiddleware/+/101152117:41
opendevreviewTakashi Kajinami proposed openstack/keystonemiddleware master: Generalize cache factory  https://review.opendev.org/c/openstack/keystonemiddleware/+/100857617:44
opendevreviewTakashi Kajinami proposed openstack/keystonemiddleware master: Deprecate built-in caching  https://review.opendev.org/c/openstack/keystonemiddleware/+/101152117:44
Matko[m]Hi! Question about keystonemiddleware.audit: were audit_map_file, service_name, ignore_req_list and ignore_path_list left unregistered in _AUDIT_OPTS on purpose? https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/audit/__init__.py#L4417:50
Matko[m]AuditMiddleware reads them from the raw paste conf, but Config() first passes every paste key through _conf_values_type_convert() to convert it to the option's type. https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/_common/config.py#L8317:50
Matko[m]Any key that isn't a registered option logs 'The option "audit_map_file" is not known to keystonemiddleware', so every deployment (like nova/cinder/neutron) with [filter:audit] gets that warning even though the value is used correctly.17:50
tkajinamMatko[m], these options are for audit middleware, not keystonemiddleware17:58
tkajinam s/keystonemiddleware/authtoken middleware/17:58
Matko[m]Sorry, I mislinked17:58
Matko[m]or not?17:58
tkajinamoh wait I did misunderstand it17:59
tkajinamhttps://github.com/openstack/keystonemiddleware/blob/593e08bd2c1deaab620cb96efaf74d1dadb07e93/keystonemiddleware/audit/__init__.py#L7617:59
Matko[m]When setting audit_map_file in [filter:audit] in paste config, there is a warning.18:00
tkajinambut I think we do register these here18:00
tkajinamin api-paste.ini, right ?18:00
Matko[m]yes18:01
tkajinamI vaguely remembered that's a common harmless symptom caused by the handling of both *.conf and *.ini . we typically see that in swift but the same can appear in the other services18:02
Matko[m]Although it's harmless, is there a way to not log a warning? or change it to debug maybe? As there is nothing an operator can do to address the warning. (Or register the option)18:04
tkajinammaybe we can change the log level of https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/_common/config.py#L5918:08
Matko[m]yes, I think that would be reasonable.18:08
tkajinamthe problem is not that keystonemiddleware does not register these options, but it attempts to load all options to paste.ini and warn about anything it doesn't know18:08
tkajinamkeystonemiddleware should not register these audit options by itself becuase it doesn't use these options18:09
tkajinambut it should not complain that it finds that audit options in paste.ini.18:09
Matko[m]right, so it's back to what you said earlier: "symptom caused by the handling of both *.conf and *.ini"18:09
tkajinamyeah18:10
tkajinamif you want to silence that warning you can probably try setting these options in config files in stead. ([audit] section in nova.conf, for example)18:11
tkajinambut maybe useful if you could file a short bug so that we fix the log level eventually.18:11
tkajinamhmm sorry I noticed ignore_req_list is not loaded from nova.conf so it doesn't work18:12
tkajinams/nova.conf/service conf/18:12
Matko[m]ok, lets change the log level then?18:12
Matko[m]I need to run some errands. I'll open a bug later and create the change. thanks for your help!18:13
tkajinam+118:13
opendevreviewGrzegorz Grasza proposed openstack/keystone stable/2025.2: credentials: reject delegated tokens, restrict PATCH to blob only  https://review.opendev.org/c/openstack/keystone/+/100233419:49
opendevreviewGrzegorz Grasza proposed openstack/keystone stable/2025.1: credentials: reject delegated tokens, restrict PATCH to blob only  https://review.opendev.org/c/openstack/keystone/+/100233519:50
opendevreviewMathieu Gagné proposed openstack/keystonemiddleware master: Log unknown paste options at debug level  https://review.opendev.org/c/openstack/keystonemiddleware/+/101155820:36
Matko[m]Any keystone core that can review this 1 byte change in keystone? thanks https://review.opendev.org/c/openstack/keystone/+/99057420:39
opendevreviewMathieu Gagné proposed openstack/keystonemiddleware master: Log unknown paste options at debug level  https://review.opendev.org/c/openstack/keystonemiddleware/+/101155822:08

Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!